CISA adds 8 vulnerabilities to its Known Exploited Vulnerabilities Catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-1776 | Use-After-Free Memory Corruption RCE in Microsoft Internet Explorer | — | 83% | KEV | — KEV |
| CVE-2014-6271 | Arbitrary Code Execution in GNU Bash (Shellshock) | — | 100% | KEV | — KEV |
| CVE-2014-7169 | Arbitrary Code Execution in GNU Bash via Environment Variables (Shellshock Follow-Up) | — | 100% | KEV | — KEV |
| CVE-2017-5689 | Unauthenticated Privilege Escalation in Intel AMT, ISM, and SBT Manageability Firmware | 9.8 | 92% | KEVPoC | KEV |
| CVE-2020-0787 | Privilege Escalation in Microsoft Windows Background Intelligent Transfer Service (BITS) | 7.8 | 43% | KEVRansomwarePoC | KEV |
| CVE-2020-5722 | Unauthenticated SQL Injection to Root RCE in Grandstream UCM6200 Series IP PBX | 9.8 | 84% | KEVPoC ×3 | KEV |
| CVE-2021-20038 | Unauthenticated Stack Buffer Overflow in SonicWall SMA 100 Appliances | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2022-22587 | Memory Corruption in Apple iOS, iPadOS, and macOS Allows Kernel-Privilege Code Execution | 9.8 | 12% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
The US CISA added eight more flaws to its Known Exploited Vulnerabilities Catalog that are known to be used in attacks in the wild. The US Cybersecurity & Infrastructure Security Agency (CISA) has added eight more flaws to the Known Exploited Vulnerabilities Catalog .
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.